Lucene search
K

35 matches found

CVE
CVE
added 2024/07/04 12:0 a.m.40 views

CVE-2024-39934

Robotmk prior to 2.0.1 is vulnerable to local privilege escalation. The issue stems from the "+shared holotree usage+" feature, which allows any user to edit any Python environment, enabling a local user to escalate to SYSTEM. Affected software: Robotmk

7.8CVSS7.1AI score0.00057EPSS
Exploits0References4
OSV
OSV
added 2022/06/23 5:15 p.m.0 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/06/23 5:15 p.m.7 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

9CVSS0.00539EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.1 views

CVE-2022-32552

Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable t...

9CVSS7.2AI score0.00539EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/06/23 12:0 a.m.1 views

Pure Storage FlashBlade 和 FlashArray 安全漏洞

Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, Inc. the Pure Storage FlashArray is an all QLC flash storage array. the Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform...

9CVSS7.9AI score0.00539EPSS
Exploits0References2
OSV
OSV
added 2020/03/23 11:15 p.m.11 views

CVE-2020-5252

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

4.1CVSS6.9AI score0.00069EPSS
Exploits0References3
Prion
Prion
added 2020/03/23 11:15 p.m.7 views

Design/Logic Flaw

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

1.9CVSS4.6AI score0.00069EPSS
Exploits0References3Affected Software1
PyPA
PyPA
added 2020/03/23 11:15 p.m.6 views

PYSEC-2020-101

The command-line "safety" package for Python has a potential security issue. There are two Python characteristics that allow malicious code to “poison-pill” command-line Safety package detection routines by disguising, or obfuscating, other malicious or non-secure packages. This vulnerability is...

5CVSS7AI score0.00069EPSS
Exploits0References3Affected Software1
Kitploit
Kitploit
added 2019/11/13 8:30 p.m.85 views

Asset Discover - Burp Suite Extension To Discover Assets From HTTP Response

Burp Suite extension to discover assets from HTTP response using passive scanning. Refer our blog Asset Discovery using Burp Suite for more details. The extension is now part of the BApp store and can be installed directly from the Burp Suite...

7.5AI score
Exploits0References4
OSV
OSV
added 2019/09/24 5:15 a.m.3 views

CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.8CVSS7.6AI score
Exploits0References7
OSV
OSV
added 2019/09/24 5:15 a.m.1 views

DEBIAN-CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.8CVSS7.3AI score0.0006EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/09/24 4:7 a.m.14 views

CVE-2019-16729

pam-python before 1.0.7-1 has an issue in regard to the default environment variable handling of Python, which could allow for local root escalation in certain PAM setups...

7.6AI score0.0006EPSS
Exploits0References7
GithubExploit
GithubExploit
added 2019/05/21 5:38 a.m.101 views

Exploit for Use After Free in Microsoft

CVE-2019-0708-poc CVE-2019-0708 remote code execution vulnerab...

10CVSS7.7AI score0.94454EPSS
Exploits123
exploitpack
exploitpack
added 2017/12/07 12:0 a.m.16 views

Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal

Claymore Dual ETH + DCRSCLBCPASC GPU Miner - Stack Buffer Overflow Path Traversal !/usr/bin/env python -- coding: UTF-8 -- github.com/tintinweb optional: pip install pysocks https://pypi.python.org/pypi/PySocks ''' API overview: nc -L -p 3333 "id":0,"jsonrpc":"2.0","method":"minergetstat1"...

0.1AI score
Exploits0
Fedora
Fedora
added 2013/05/23 12:42 p.m.19 views

[SECURITY] Fedora 17 Update: python-virtualenv-1.9.1-1.fc17

virtualenv is a tool to create isolated Python environments. virtualenv is a successor to workingenv, and an extension of virtual-python. It is written by Ian Bicking, and sponsored by the Open Planning Project. It is licensed under an MIT-style permissive license...

2.1CVSS2.5AI score0.00085EPSS
Exploits0
Rows per page
Query Builder